Results 1 to 12 of 12

Thread: Restrict internet access for local loged on users

  1. #1
    Member onetopdog's Avatar
    Join Date
    May 2001
    Location
    NC
    Posts
    54

    Question Restrict internet access for local loged on users

    I am running WinXP Pro and I want to restrict internet access to several local loged on users. %100 no access to any app or service they use. Just as if the internet is not there or my network card is not there. (my kids by the way). I have been in computer management and also local security setings. But to no avail. My internet access is Roadrunner Hum I am trying to think if there is any more information that you might need.
    onetopdog

  2. #2
    Advanced Member jumpingrat's Avatar
    Join Date
    Jun 2002
    Location
    Los Angeles, Calif
    Posts
    894
    In IE go to tools > internet options. From there you can change the internet access privlidges for seperate users. You don't even need to block the internet completely. With content advisor you can strictly limit where and what your kids can see.
    Null

  3. #3
    Member onetopdog's Avatar
    Join Date
    May 2001
    Location
    NC
    Posts
    54
    That really will not get me what I want. They still could get online with there email app, different browser and other apps that use the internet. I know there has got to be a way a admin can stop all internet activity on any user he chooses. P.S. all this will be done local.
    onetopdog

  4. #4
    Senior Member earthmofo's Avatar
    Join Date
    Nov 2000
    Location
    Providence, RI USA
    Posts
    1,128
    Try the Group Policy Editor. If I remember correctly you may be able to disable the Lan connection per user. In the editor try in:

    User Configuration>Internet Explorer Maintenance

    or

    User Configuration>Administrative Templates>Network>Network Connections
    "A never ending quest for knowledge as with knowledge comes wisdom"

    Main System running Windows XP Pro: Intel Celeron 2.4 Ghz, 1 Gig Ram, 2 80 gig WD 7200 rpm HD's, Radeon 9200 Pro, Envision EN9110 19" LCD Display, HP 9500 CD-RW, D-Link DFE-530TX+ PCI Adapter, D-Link DI-704P Router, Motorola SB5100 Cable Modem with Cox HSI

  5. #5
    Advanced Member jumpingrat's Avatar
    Join Date
    Jun 2002
    Location
    Los Angeles, Calif
    Posts
    894
    To actually restrict the apps that a user can run follow this link for an in depth explanation (And it's done in the registry so do a backup) http://www.kellys-korner-xp.com/xp_a.htm#xp_restrict Good luck.


    Or use a firewall that has user restrictions like zone alarm.
    Null

  6. #6
    Elite Member Norm's Avatar
    Join Date
    Mar 2001
    Posts
    14,133
    How about releasing the IP as a startup option for each user?

  7. #7
    SG DC Team Member lance-tek's Avatar
    Join Date
    Apr 2001
    Location
    Indianapolis, IN
    Posts
    5,601
    Quote Originally Posted by Norm
    How about releasing the IP as a startup option for each user?
    and Norm has previously posted a nice little .bat file that will do it for you

    you could also use a hardware config for each profile and just disable the NIC for any profiles that you do not want to have network or internet access.

    -lance
    A mistake does not become an error until one refuses to correct it

    Folding for the future

  8. #8
    Senior Member Sid's Avatar
    Join Date
    Sep 2000
    Location
    Hell's Kitchen
    Posts
    5,174
    Password there accounts and don't give them the password. You did say 100% apps and internet, right?

  9. #9
    SG Enthusiast Joel's Avatar
    Join Date
    Sep 2003
    Location
    F.WV
    Posts
    2,981
    Quote Originally Posted by Sid
    Password there accounts and don't give them the password. You did say 100% apps and internet, right?
    That's what I'm thinking.
    Core 2 Quad Q6600 @ 3.6GHz on Water | 8GB DDR2 | 2x 74GB Raptor RAID0 | 250GB Storage | P5E | 2900XT @ 850 Core | DVD-RW | 2x 24" Widescreen LCD | Saitek Eclipse | Logitech G5

  10. #10
    Advanced Member jumpingrat's Avatar
    Join Date
    Jun 2002
    Location
    Los Angeles, Calif
    Posts
    894
    Nah, it sounds like he wants them to be able to use the computer but as if there were no internet hooked up.
    Null

  11. #11
    SG Enthusiast koldchillah's Avatar
    Join Date
    Apr 2002
    Location
    Orlando, FL
    Posts
    4,608
    Quote Originally Posted by lance-tek
    you could also use a hardware config for each profile and just disable the NIC for any profiles that you do not want to have network or internet access.

    -lance
    I was thinking along the same lines, but I don't recall how to automatically bind a user login to a specific hardware profile. Isn't the hardware profile chosen during boot rather than login?

    I'm also thinking the workstation service can be disabled under their profiles. Group policy and/or a script placed in startup should be able to do that.

    Norm is on the right track as usual.. A batch file that releases the IP info would do the trick, but if these kids are smart, they can get around that rather easily by just "renewing" the IP. If the PC relies on DHCP for its IP address, then disabling the DHCP client service for those users would have a similar effect except they wouldn't be able to renew the address.

    Yet another way would be to use a VB script in their startup folder that shuts down all the processes you are concerned about anytime they are loaded. I do this on my work PC in case anybody decides to get VNC happy.

    If you use a startup script/batch file, make sure to deny the users access to the file so they can't delete it from their startup folders.
    "Nobody's invincible, no plan is foolproof, We all must meet our moment of truth." - Guru

  12. #12
    Junior Member
    Join Date
    May 2011
    Posts
    2
    You can restrict internet access for differnet users on XP using Microsoft shared computer toolkit as mentioned here http://www.techhelpcentre.com/showthread.php?t=148367. What you want to do is block all browsers apart from Internet Explorer, then restrict browsing through internet explorer, thus giving you complete control over the browsing.
    Hope that helps.

Similar Threads

  1. what do the entries in this log mean????
    By Scum333 in forum Network Security
    Replies: 5
    Last Post: 03-04-09, 06:37 PM
  2. Restricted Client Internet Access
    By rado99 in forum Networking Forum
    Replies: 8
    Last Post: 01-29-04, 06:22 AM
  3. Werid LAN Access Problem
    By sian in forum Networking Forum
    Replies: 7
    Last Post: 01-24-03, 10:40 PM
  4. How to delete IE?
    By YARDofSTUF in forum General Discussion Board
    Replies: 14
    Last Post: 07-13-02, 10:41 PM
  5. XP Users, please do not add on to this thread
    By Lobo in forum Broadband Tweaks Help
    Replies: 0
    Last Post: 04-19-02, 10:58 AM

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •